Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
rollup-plugin-esbuild-minify
Advanced tools
Rollup plugin to minify or clean up generated bundles using esbuild.
Rollup plugin to minify or clean up generated bundles using esbuild.
Simpler than rollup-plugin-esbuild and rollup-plugin-esbuild-transform, focusing only on minification of the bundled JavaScript output. Faster than @rollup/plugin-terser. See also benchmark results of various minifiers.
import { minify } from 'rollup-plugin-esbuild-minify'
export default {
plugins: [minify()]
// the rest of the configuration
}
Make sure that you use Node.js 14 or newer and Rollup 2 or newer. Use your favourite package manager - NPM, PNPM or Yarn:
npm i -D rollup-plugin-esbuild-minify
pnpm i -D rollup-plugin-esbuild-minify
yarn add -D rollup-plugin-esbuild-minify
Create a rollup.config.js
configuration file and import the plugin:
import { minify } from 'rollup-plugin-esbuild-minify'
export default {
input: 'src/index.js',
output: { file: 'dist/main.js', format: 'iife', sourcemap: true },
plugins: [
minify({ logLevel: 'debug', logLimit: 100 })
]
}
Then call rollup
either via the command-line or programmatically.
The following options can be passed in an object to the plugin function to change the default values.
logLevel
Type: 'silent' | 'error' | 'warning' | 'info' | 'debug' | 'verbose'
Default: 'warning'
Controls the number and detail of progress messages logged on the console.
See also the original documentation.
logLimit
Type: Integer
Default: 10
Maximum number of logged messages. If zero (0
) is provided, all messages will be logged.
See also the original documentation.
legalComments
Type: 'none' | 'inline' | 'eof' | 'linked' | 'external'
Default: 'none'
Allows including or extracting legal comments. A "legal comment" is considered to be any statement-level comment that contains @license
or @preserve
or that starts with //!
or /*!
.
See also the original documentation.
minify
Type: Boolean
Default: true
Allows disabling the minification. The code will be pretty-printed instead. It can be used to clean up the code.
See also the original documentation.
In lieu of a formal styleguide, take care to maintain the existing coding style. Lint and test your code.
Copyright (C) 2022-2024 Ferdinand Prantl
Licensed under the MIT License.
FAQs
Rollup plugin to minify or clean up generated bundles using esbuild.
The npm package rollup-plugin-esbuild-minify receives a total of 7,869 weekly downloads. As such, rollup-plugin-esbuild-minify popularity was classified as popular.
We found that rollup-plugin-esbuild-minify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.